Composer 2.10 adds native malware blocking and a unified config.policy framework for PHP supply chain security. Here is how it works and how to tune it.
Tag: security
6 posts tagged with "security"
The PHP Foundation's new Ecosystem Security Team scanned 300+ Composer packages in its first month. Here is what shipped and how to get involved.
The PHP Foundation's 2025 impact report reveals 2,929 commits, a new Ecosystem Security Team funded by Alpha-Omega, and bold goals for 2026.
Composer 2.9 and 2.10 bring automatic security blocking, a new repo CLI command, and malware filtering. Here's what changed and how to use it.
PHP 8.5's built-in URI extension replaces the broken parse_url() with RFC 3986 and WHATWG-compliant classes for immutable, safe URL handling.
Symfony 7.3 ships two powerful new components — ObjectMapper and JsonPath — plus console upgrades and security wins worth knowing about.